On this page (9 sections)
What the requirement is
- Who: all developers distributing apps on certified Android devices running Android 7 or higher, whether through Google Play, another participating store or direct download.
- What: verify your identity (individual) or organisation, and register the package names of your apps, which “may include proving ownership of the private signing keys used for those packages”.
- Where: Play Console if you publish on Google Play (and it can also register apps you distribute outside Play); the separate Android Developer Console if you distribute exclusively outside Play.
- Consequence: unverified apps cannot be installed by users on certified devices in the enforcement regions; for Play developers, Google says to register any remaining apps by 30 September 2026 “to avoid global removal from Google Play”.
Timeline (verified 22 September 2026)
| When | What | Status |
|---|---|---|
| March 2026 | Verification and registration open to all developers in Play Console and the Android Developer Console | done |
| August 2026 | Developer APIs, limited-distribution accounts and the power-user “advanced flow” launch | done |
| 30 September 2026 | Enforcement in Brazil, Indonesia, Singapore and Thailand for participating stores (mobile and tablet form factors); Play developers must have registered remaining apps | current |
| 2027 | Global rollout to all certified Android devices | upcoming |
If you publish on Google Play
Google’s guidance for Play developers is reassuring on the identity side and specific on the app side:
- “For most Play developers, no new action is required for identity verification. Your existing verified identity … meets this requirement.” Check Settings → Developer account in Play Console.
- New apps created in Play Console are registered automatically. For existing apps, “99% of apps on Play have been registered automatically” — and the remaining 1 % is exactly the set that needs attention. Play Console’s Home page lists apps that still need registration.
- If you use Play App Signing, Google already holds the information to identify ownership and your eligible apps are part of the automatic registration.
- Apps you also distribute outside Play (enterprise builds, direct downloads, other stores) can be registered through Play Console so they remain installable.
If you distribute outside Google Play
- Register in the Android Developer Console: a full-distribution account costs $25 (the same as Play’s registration fee) and requires identity verification; organisations need a D-U-N-S number, which is free but “can take up to 28 days”.
- A limited-distribution account (students, teachers, hobbyists) is free, needs no government ID, and allows sharing with up to 20 specific devices.
- The console lets you add and verify multiple signing keys per package.
- ADB installs are not affected — development and testing continue as before. Users can still install apps from unverified developers through a deliberate “advanced flow” with warnings and a waiting period; that is not a distribution strategy.
The cases that actually cause trouble
You no longer have the signing key
Google is explicit: “If you lose your signing key you won’t be able to register your packages.” Apps on Play App Signing are safe because Google holds the app signing key; apps still signed with a self-managed key that has been lost need a plan — see lost keystore or upload key.
The package name is already in use
If a package name is registered by someone else, your key “may not be eligible to claim it outright”. Google suggests a different package name, or a registration request with additional review — and warns the name may also be used by others. Changing a package name means a new app on Play, with all the migration that implies; the review has to weigh both options honestly.
An agency or freelancer published the app under their own account
The registered developer is whoever owns the account and holds the key. If that is not you, the fix is usually an app transfer to your own verified account plus key handling — see Google Play app transfer. Doing it before the global rollout avoids doing it under pressure.
Personal account, growing business
Organisation verification needs the D-U-N-S number and matching legal details. If the business is not yet registered with Dun & Bradstreet, start that first — the 28-day lead time is real.
Several keys, several channels
Enterprise builds signed with a different key, white-label variants, or a Play build plus a direct-download build each need their keys registered against the package. Inventory them before the console shows you one at a time.
What we can and cannot do here
We never perform identity verification for you, never handle your government ID or D-U-N-S paperwork, and never suggest ways around the requirement. What we do is the technical and structural preparation: inventorying packages and keys, checking key eligibility and package conflicts, planning transfers and account structures, enrolling apps in Play App Signing, registering keys for non-Play channels, and fixing the builds that follow. The account holder completes the verification steps in the console.
Practical sequence
- Open Play Console Home and note every app that is not yet registered; open Settings → Developer account and confirm the verification status.
- List every package you distribute, every channel it ships through, and which key signs each build.
- For each package: Play App Signing enabled? Key available? Package registered? Conflicts reported?
- For apps published by a third party: decide between a transfer to your account and a formal agreement in which the publisher registers the app.
- For non-Play distribution: register in the appropriate console and add every signing key.
- Fix what the inventory exposes — usually lost keys, agency ownership and missing organisation details — before the global rollout.
Not the same as …
- The closed-testing requirement for new personal accounts (a Play policy about testing, not identity).
- An account termination (an enforcement action; verification does not reinstate terminated accounts).
- Google OAuth app verification (a Google Cloud process for sign-in scopes).
Checklist
- Developer identity or organisation verified in Play Console (or the Android Developer Console)
- Every distributed package registered; Play Console Home shows no pending apps
- Signing keys available and registered for every channel; Play App Signing enrolled where possible
- No unresolved package-name conflicts
- Apps published by agencies transferred or covered by an agreement
- D-U-N-S number in hand for organisation accounts
Frequently asked questions
What is Android developer verification, and does it apply to me?
It is Google's requirement that the developer behind an Android app is a verified identity and that the app's package name and signing keys are registered, so that certified Android devices will keep installing it. It reaches beyond Google Play: apps distributed as APKs or through other stores are in scope too. Enforcement starts regionally on 30 September 2026 and becomes global during 2027.
Related: Android Developer Verification, App Publishing Deadlines
Can App Rejection Fix complete developer verification for me?
No, and you should be suspicious of anyone who says they will. Identity verification is completed by the account holder, with their own documents, in Google's console — we never handle your government ID or D-U-N-S paperwork and never act as the account holder. What we do is the technical preparation around it: inventorying packages and signing keys, checking key eligibility and package-name conflicts, planning transfers and account structures, enrolling apps in Play App Signing, registering keys for non-Play channels and fixing the builds that follow.
Related: Android Developer Verification, About
What if I have lost the signing key for an app I need to register?
It depends on whether the app uses Play App Signing. If Google holds the app signing key, a lost upload key can be reset through Play Console and publishing continues. If the app is signed with a key you hold and that key is gone, the app identity cannot be recreated — on Google Play that usually means a new package name and a migration, and for non-Play channels it means the old artefacts cannot be updated at all. Deal with this before verification, not after.
Related: Lost Keystore / Upload Key, Android Developer Verification